<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
<meta http-equiv="X-UA-Compatible" content="IE=9"/>
<meta name="generator" content="Doxygen 1.8.6"/>
<title>tinydtls: ccm.c Source File</title>
<link href="tabs.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="jquery.js"></script>
<script type="text/javascript" src="dynsections.js"></script>
<link href="search/search.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="search/search.js"></script>
<script type="text/javascript">
  $(document).ready(function() { searchBox.OnSelectItem(0); });
</script>
<link href="doxygen.css" rel="stylesheet" type="text/css" />
</head>
<body>
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
<div id="titlearea">
<table cellspacing="0" cellpadding="0">
 <tbody>
 <tr style="height: 56px;">
  <td style="padding-left: 0.5em;">
   <div id="projectname">tinydtls
   &#160;<span id="projectnumber">0.8.2</span>
   </div>
  </td>
 </tr>
 </tbody>
</table>
</div>
<!-- end header part -->
<!-- Generated by Doxygen 1.8.6 -->
<script type="text/javascript">
var searchBox = new SearchBox("searchBox", "search",false,'Search');
</script>
  <div id="navrow1" class="tabs">
    <ul class="tablist">
      <li><a href="index.html"><span>Main&#160;Page</span></a></li>
      <li><a href="modules.html"><span>Modules</span></a></li>
      <li><a href="annotated.html"><span>Data&#160;Structures</span></a></li>
      <li class="current"><a href="files.html"><span>Files</span></a></li>
      <li>
        <div id="MSearchBox" class="MSearchBoxInactive">
        <span class="left">
          <img id="MSearchSelect" src="search/mag_sel.png"
               onmouseover="return searchBox.OnSearchSelectShow()"
               onmouseout="return searchBox.OnSearchSelectHide()"
               alt=""/>
          <input type="text" id="MSearchField" value="Search" accesskey="S"
               onfocus="searchBox.OnSearchFieldFocus(true)" 
               onblur="searchBox.OnSearchFieldFocus(false)" 
               onkeyup="searchBox.OnSearchFieldChange(event)"/>
          </span><span class="right">
            <a id="MSearchClose" href="javascript:searchBox.CloseResultsWindow()"><img id="MSearchCloseImg" border="0" src="search/close.png" alt=""/></a>
          </span>
        </div>
      </li>
    </ul>
  </div>
  <div id="navrow2" class="tabs2">
    <ul class="tablist">
      <li><a href="files.html"><span>File&#160;List</span></a></li>
      <li><a href="globals.html"><span>Globals</span></a></li>
    </ul>
  </div>
</div><!-- top -->
<!-- window showing the filter options -->
<div id="MSearchSelectWindow"
     onmouseover="return searchBox.OnSearchSelectShow()"
     onmouseout="return searchBox.OnSearchSelectHide()"
     onkeydown="return searchBox.OnSearchSelectKey(event)">
<a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(0)"><span class="SelectionMark">&#160;</span>All</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(1)"><span class="SelectionMark">&#160;</span>Data Structures</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(2)"><span class="SelectionMark">&#160;</span>Files</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(3)"><span class="SelectionMark">&#160;</span>Functions</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(4)"><span class="SelectionMark">&#160;</span>Variables</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(5)"><span class="SelectionMark">&#160;</span>Typedefs</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(6)"><span class="SelectionMark">&#160;</span>Enumerations</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(7)"><span class="SelectionMark">&#160;</span>Enumerator</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(8)"><span class="SelectionMark">&#160;</span>Macros</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(9)"><span class="SelectionMark">&#160;</span>Groups</a></div>

<!-- iframe showing the search results (closed by default) -->
<div id="MSearchResultsWindow">
<iframe src="javascript:void(0)" frameborder="0" 
        name="MSearchResults" id="MSearchResults">
</iframe>
</div>

<div class="header">
  <div class="headertitle">
<div class="title">ccm.c</div>  </div>
</div><!--header-->
<div class="contents">
<a href="ccm_8c.html">Go to the documentation of this file.</a><div class="fragment"><div class="line"><a name="l00001"></a><span class="lineno">    1</span>&#160;<span class="comment">/* dtls -- a very basic DTLS implementation</span></div>
<div class="line"><a name="l00002"></a><span class="lineno">    2</span>&#160;<span class="comment"> *</span></div>
<div class="line"><a name="l00003"></a><span class="lineno">    3</span>&#160;<span class="comment"> * Copyright (C) 2011--2014 Olaf Bergmann &lt;bergmann@tzi.org&gt;</span></div>
<div class="line"><a name="l00004"></a><span class="lineno">    4</span>&#160;<span class="comment"> *</span></div>
<div class="line"><a name="l00005"></a><span class="lineno">    5</span>&#160;<span class="comment"> * Permission is hereby granted, free of charge, to any person</span></div>
<div class="line"><a name="l00006"></a><span class="lineno">    6</span>&#160;<span class="comment"> * obtaining a copy of this software and associated documentation</span></div>
<div class="line"><a name="l00007"></a><span class="lineno">    7</span>&#160;<span class="comment"> * files (the &quot;Software&quot;), to deal in the Software without</span></div>
<div class="line"><a name="l00008"></a><span class="lineno">    8</span>&#160;<span class="comment"> * restriction, including without limitation the rights to use, copy,</span></div>
<div class="line"><a name="l00009"></a><span class="lineno">    9</span>&#160;<span class="comment"> * modify, merge, publish, distribute, sublicense, and/or sell copies</span></div>
<div class="line"><a name="l00010"></a><span class="lineno">   10</span>&#160;<span class="comment"> * of the Software, and to permit persons to whom the Software is</span></div>
<div class="line"><a name="l00011"></a><span class="lineno">   11</span>&#160;<span class="comment"> * furnished to do so, subject to the following conditions:</span></div>
<div class="line"><a name="l00012"></a><span class="lineno">   12</span>&#160;<span class="comment"> *</span></div>
<div class="line"><a name="l00013"></a><span class="lineno">   13</span>&#160;<span class="comment"> * The above copyright notice and this permission notice shall be</span></div>
<div class="line"><a name="l00014"></a><span class="lineno">   14</span>&#160;<span class="comment"> * included in all copies or substantial portions of the Software.</span></div>
<div class="line"><a name="l00015"></a><span class="lineno">   15</span>&#160;<span class="comment"> *</span></div>
<div class="line"><a name="l00016"></a><span class="lineno">   16</span>&#160;<span class="comment"> * THE SOFTWARE IS PROVIDED &quot;AS IS&quot;, WITHOUT WARRANTY OF ANY KIND,</span></div>
<div class="line"><a name="l00017"></a><span class="lineno">   17</span>&#160;<span class="comment"> * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF</span></div>
<div class="line"><a name="l00018"></a><span class="lineno">   18</span>&#160;<span class="comment"> * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND</span></div>
<div class="line"><a name="l00019"></a><span class="lineno">   19</span>&#160;<span class="comment"> * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS</span></div>
<div class="line"><a name="l00020"></a><span class="lineno">   20</span>&#160;<span class="comment"> * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN</span></div>
<div class="line"><a name="l00021"></a><span class="lineno">   21</span>&#160;<span class="comment"> * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN</span></div>
<div class="line"><a name="l00022"></a><span class="lineno">   22</span>&#160;<span class="comment"> * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE</span></div>
<div class="line"><a name="l00023"></a><span class="lineno">   23</span>&#160;<span class="comment"> * SOFTWARE.</span></div>
<div class="line"><a name="l00024"></a><span class="lineno">   24</span>&#160;<span class="comment"> */</span></div>
<div class="line"><a name="l00025"></a><span class="lineno">   25</span>&#160;</div>
<div class="line"><a name="l00026"></a><span class="lineno">   26</span>&#160;<span class="preprocessor">#include &lt;string.h&gt;</span></div>
<div class="line"><a name="l00027"></a><span class="lineno">   27</span>&#160;</div>
<div class="line"><a name="l00028"></a><span class="lineno">   28</span>&#160;<span class="preprocessor">#include &quot;<a class="code" href="dtls__config_8h.html">dtls_config.h</a>&quot;</span></div>
<div class="line"><a name="l00029"></a><span class="lineno">   29</span>&#160;<span class="preprocessor">#include &quot;<a class="code" href="global_8h.html">global.h</a>&quot;</span></div>
<div class="line"><a name="l00030"></a><span class="lineno">   30</span>&#160;<span class="preprocessor">#include &quot;<a class="code" href="numeric_8h.html">numeric.h</a>&quot;</span></div>
<div class="line"><a name="l00031"></a><span class="lineno">   31</span>&#160;<span class="preprocessor">#include &quot;<a class="code" href="ccm_8h.html">ccm.h</a>&quot;</span></div>
<div class="line"><a name="l00032"></a><span class="lineno">   32</span>&#160;</div>
<div class="line"><a name="l00033"></a><span class="lineno">   33</span>&#160;<span class="preprocessor">#ifdef HAVE_ASSERT_H</span></div>
<div class="line"><a name="l00034"></a><span class="lineno">   34</span>&#160;<span class="preprocessor"></span><span class="preprocessor"># include &lt;assert.h&gt;</span></div>
<div class="line"><a name="l00035"></a><span class="lineno">   35</span>&#160;<span class="preprocessor">#endif</span></div>
<div class="line"><a name="l00036"></a><span class="lineno">   36</span>&#160;<span class="preprocessor"></span></div>
<div class="line"><a name="l00037"></a><span class="lineno"><a class="line" href="ccm_8c.html#a18f6fffa08314e79c95e2de10e7409cb">   37</a></span>&#160;<span class="preprocessor">#define CCM_FLAGS(A,M,L) (((A &gt; 0) &lt;&lt; 6) | (((M - 2)/2) &lt;&lt; 3) | (L - 1))</span></div>
<div class="line"><a name="l00038"></a><span class="lineno">   38</span>&#160;<span class="preprocessor"></span></div>
<div class="line"><a name="l00039"></a><span class="lineno"><a class="line" href="ccm_8c.html#a46e95fc2cb115ab9c342707ec443265f">   39</a></span>&#160;<span class="preprocessor">#define MASK_L(_L) ((1 &lt;&lt; 8 * _L) - 1)</span></div>
<div class="line"><a name="l00040"></a><span class="lineno">   40</span>&#160;<span class="preprocessor"></span></div>
<div class="line"><a name="l00041"></a><span class="lineno"><a class="line" href="ccm_8c.html#a13d9e1fa611f50a7176fd6da7b1b4994">   41</a></span>&#160;<span class="preprocessor">#define SET_COUNTER(A,L,cnt,C) {                    \</span></div>
<div class="line"><a name="l00042"></a><span class="lineno">   42</span>&#160;<span class="preprocessor">    int i;                              \</span></div>
<div class="line"><a name="l00043"></a><span class="lineno">   43</span>&#160;<span class="preprocessor">    memset((A) + DTLS_CCM_BLOCKSIZE - (L), 0, (L));         \</span></div>
<div class="line"><a name="l00044"></a><span class="lineno">   44</span>&#160;<span class="preprocessor">    (C) = (cnt) &amp; MASK_L(L);                        \</span></div>
<div class="line"><a name="l00045"></a><span class="lineno">   45</span>&#160;<span class="preprocessor">    for (i = DTLS_CCM_BLOCKSIZE - 1; (C) &amp;&amp; (i &gt; (L)); --i, (C) &gt;&gt;= 8)  \</span></div>
<div class="line"><a name="l00046"></a><span class="lineno">   46</span>&#160;<span class="preprocessor">      (A)[i] |= (C) &amp; 0xFF;                     \</span></div>
<div class="line"><a name="l00047"></a><span class="lineno">   47</span>&#160;<span class="preprocessor">  }</span></div>
<div class="line"><a name="l00048"></a><span class="lineno">   48</span>&#160;<span class="preprocessor"></span></div>
<div class="line"><a name="l00049"></a><span class="lineno">   49</span>&#160;<span class="keyword">static</span> <span class="keyword">inline</span> <span class="keywordtype">void</span> </div>
<div class="line"><a name="l00050"></a><span class="lineno"><a class="line" href="ccm_8c.html#a1dfe92428f63772e3907a26435e54354">   50</a></span>&#160;<a class="code" href="ccm_8c.html#a1dfe92428f63772e3907a26435e54354">block0</a>(<span class="keywordtype">size_t</span> M,       <span class="comment">/* number of auth bytes */</span></div>
<div class="line"><a name="l00051"></a><span class="lineno">   51</span>&#160;       <span class="keywordtype">size_t</span> L,       <span class="comment">/* number of bytes to encode message length */</span></div>
<div class="line"><a name="l00052"></a><span class="lineno">   52</span>&#160;       <span class="keywordtype">size_t</span> la,      <span class="comment">/* l(a) octets additional authenticated data */</span></div>
<div class="line"><a name="l00053"></a><span class="lineno">   53</span>&#160;       <span class="keywordtype">size_t</span> lm,      <span class="comment">/* l(m) message length */</span></div>
<div class="line"><a name="l00054"></a><span class="lineno">   54</span>&#160;       <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> nonce[<a class="code" href="ccm_8h.html#a5c46c97c6c3ef5d4e5bd616dbd064859">DTLS_CCM_BLOCKSIZE</a>],</div>
<div class="line"><a name="l00055"></a><span class="lineno">   55</span>&#160;       <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *result) {</div>
<div class="line"><a name="l00056"></a><span class="lineno">   56</span>&#160;  <span class="keywordtype">int</span> i;</div>
<div class="line"><a name="l00057"></a><span class="lineno">   57</span>&#160;</div>
<div class="line"><a name="l00058"></a><span class="lineno">   58</span>&#160;  result[0] = <a class="code" href="ccm_8c.html#a18f6fffa08314e79c95e2de10e7409cb">CCM_FLAGS</a>(la, M, L);</div>
<div class="line"><a name="l00059"></a><span class="lineno">   59</span>&#160;</div>
<div class="line"><a name="l00060"></a><span class="lineno">   60</span>&#160;  <span class="comment">/* copy the nonce */</span></div>
<div class="line"><a name="l00061"></a><span class="lineno">   61</span>&#160;  memcpy(result + 1, nonce, DTLS_CCM_BLOCKSIZE - L);</div>
<div class="line"><a name="l00062"></a><span class="lineno">   62</span>&#160;  </div>
<div class="line"><a name="l00063"></a><span class="lineno">   63</span>&#160;  <span class="keywordflow">for</span> (i=0; i &lt; L; i++) {</div>
<div class="line"><a name="l00064"></a><span class="lineno">   64</span>&#160;    result[15-i] = lm &amp; 0xff;</div>
<div class="line"><a name="l00065"></a><span class="lineno">   65</span>&#160;    lm &gt;&gt;= 8;</div>
<div class="line"><a name="l00066"></a><span class="lineno">   66</span>&#160;  }</div>
<div class="line"><a name="l00067"></a><span class="lineno">   67</span>&#160;}</div>
<div class="line"><a name="l00068"></a><span class="lineno">   68</span>&#160;</div>
<div class="line"><a name="l00083"></a><span class="lineno">   83</span>&#160;<span class="keyword">static</span> <span class="keywordtype">void</span></div>
<div class="line"><a name="l00084"></a><span class="lineno"><a class="line" href="ccm_8c.html#a59faf5a2a638dc03c01605d4bebe0bcc">   84</a></span>&#160;<a class="code" href="ccm_8c.html#a59faf5a2a638dc03c01605d4bebe0bcc">add_auth_data</a>(rijndael_ctx *ctx, <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *msg, <span class="keywordtype">size_t</span> la,</div>
<div class="line"><a name="l00085"></a><span class="lineno">   85</span>&#160;          <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> B[<a class="code" href="ccm_8h.html#a5c46c97c6c3ef5d4e5bd616dbd064859">DTLS_CCM_BLOCKSIZE</a>], </div>
<div class="line"><a name="l00086"></a><span class="lineno">   86</span>&#160;          <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> X[DTLS_CCM_BLOCKSIZE]) {</div>
<div class="line"><a name="l00087"></a><span class="lineno">   87</span>&#160;  <span class="keywordtype">size_t</span> i,j; </div>
<div class="line"><a name="l00088"></a><span class="lineno">   88</span>&#160;</div>
<div class="line"><a name="l00089"></a><span class="lineno">   89</span>&#160;  rijndael_encrypt(ctx, B, X);</div>
<div class="line"><a name="l00090"></a><span class="lineno">   90</span>&#160;</div>
<div class="line"><a name="l00091"></a><span class="lineno">   91</span>&#160;  memset(B, 0, DTLS_CCM_BLOCKSIZE);</div>
<div class="line"><a name="l00092"></a><span class="lineno">   92</span>&#160;</div>
<div class="line"><a name="l00093"></a><span class="lineno">   93</span>&#160;  <span class="keywordflow">if</span> (!la)</div>
<div class="line"><a name="l00094"></a><span class="lineno">   94</span>&#160;    <span class="keywordflow">return</span>;</div>
<div class="line"><a name="l00095"></a><span class="lineno">   95</span>&#160;</div>
<div class="line"><a name="l00096"></a><span class="lineno">   96</span>&#160;<span class="preprocessor">#ifndef WITH_CONTIKI</span></div>
<div class="line"><a name="l00097"></a><span class="lineno">   97</span>&#160;<span class="preprocessor"></span>    <span class="keywordflow">if</span> (la &lt; 0xFF00) {      <span class="comment">/* 2^16 - 2^8 */</span></div>
<div class="line"><a name="l00098"></a><span class="lineno">   98</span>&#160;      j = 2;</div>
<div class="line"><a name="l00099"></a><span class="lineno">   99</span>&#160;      <a class="code" href="numeric_8h.html#a074d352855e1ffde4c2ddb6a6fea01b9">dtls_int_to_uint16</a>(B, la);</div>
<div class="line"><a name="l00100"></a><span class="lineno">  100</span>&#160;  } <span class="keywordflow">else</span> <span class="keywordflow">if</span> (la &lt;= UINT32_MAX) {</div>
<div class="line"><a name="l00101"></a><span class="lineno">  101</span>&#160;      j = 6;</div>
<div class="line"><a name="l00102"></a><span class="lineno">  102</span>&#160;      <a class="code" href="numeric_8h.html#a074d352855e1ffde4c2ddb6a6fea01b9">dtls_int_to_uint16</a>(B, 0xFFFE);</div>
<div class="line"><a name="l00103"></a><span class="lineno">  103</span>&#160;      <a class="code" href="numeric_8h.html#a6914ee523b27539f4e441bede8c072b4">dtls_int_to_uint32</a>(B+2, la);</div>
<div class="line"><a name="l00104"></a><span class="lineno">  104</span>&#160;    } <span class="keywordflow">else</span> {</div>
<div class="line"><a name="l00105"></a><span class="lineno">  105</span>&#160;      j = 10;</div>
<div class="line"><a name="l00106"></a><span class="lineno">  106</span>&#160;      <a class="code" href="numeric_8h.html#a074d352855e1ffde4c2ddb6a6fea01b9">dtls_int_to_uint16</a>(B, 0xFFFF);</div>
<div class="line"><a name="l00107"></a><span class="lineno">  107</span>&#160;      <a class="code" href="numeric_8h.html#ab4d80395fb7f4118dfcb101ae94a5e93">dtls_int_to_uint64</a>(B+2, la);</div>
<div class="line"><a name="l00108"></a><span class="lineno">  108</span>&#160;    }</div>
<div class="line"><a name="l00109"></a><span class="lineno">  109</span>&#160;<span class="preprocessor">#else </span><span class="comment">/* WITH_CONTIKI */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00110"></a><span class="lineno">  110</span>&#160;<span class="preprocessor"></span>  <span class="comment">/* With Contiki, we are building for small devices and thus</span></div>
<div class="line"><a name="l00111"></a><span class="lineno">  111</span>&#160;<span class="comment">   * anticipate that the number of additional authentication bytes</span></div>
<div class="line"><a name="l00112"></a><span class="lineno">  112</span>&#160;<span class="comment">   * will not exceed 65280 bytes (0xFF00) and we can skip the</span></div>
<div class="line"><a name="l00113"></a><span class="lineno">  113</span>&#160;<span class="comment">   * workarounds required for j=6 and j=10 on devices with a word size</span></div>
<div class="line"><a name="l00114"></a><span class="lineno">  114</span>&#160;<span class="comment">   * of 32 bits or 64 bits, respectively.</span></div>
<div class="line"><a name="l00115"></a><span class="lineno">  115</span>&#160;<span class="comment">   */</span></div>
<div class="line"><a name="l00116"></a><span class="lineno">  116</span>&#160;</div>
<div class="line"><a name="l00117"></a><span class="lineno">  117</span>&#160;  assert(la &lt; 0xFF00);</div>
<div class="line"><a name="l00118"></a><span class="lineno">  118</span>&#160;  j = 2;</div>
<div class="line"><a name="l00119"></a><span class="lineno">  119</span>&#160;  <a class="code" href="numeric_8h.html#a074d352855e1ffde4c2ddb6a6fea01b9">dtls_int_to_uint16</a>(B, la);</div>
<div class="line"><a name="l00120"></a><span class="lineno">  120</span>&#160;<span class="preprocessor">#endif </span><span class="comment">/* WITH_CONTIKI */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00121"></a><span class="lineno">  121</span>&#160;<span class="preprocessor"></span></div>
<div class="line"><a name="l00122"></a><span class="lineno">  122</span>&#160;    i = <a class="code" href="debug_8c.html#ac6afabdc09a49a433ee19d8a9486056d">min</a>(DTLS_CCM_BLOCKSIZE - j, la);</div>
<div class="line"><a name="l00123"></a><span class="lineno">  123</span>&#160;    memcpy(B + j, msg, i);</div>
<div class="line"><a name="l00124"></a><span class="lineno">  124</span>&#160;    la -= i;</div>
<div class="line"><a name="l00125"></a><span class="lineno">  125</span>&#160;    msg += i;</div>
<div class="line"><a name="l00126"></a><span class="lineno">  126</span>&#160;    </div>
<div class="line"><a name="l00127"></a><span class="lineno">  127</span>&#160;    <a class="code" href="global_8h.html#a6c31c5d8a0fe09547a192100d2a00dc5">memxor</a>(B, X, DTLS_CCM_BLOCKSIZE);</div>
<div class="line"><a name="l00128"></a><span class="lineno">  128</span>&#160;  </div>
<div class="line"><a name="l00129"></a><span class="lineno">  129</span>&#160;  rijndael_encrypt(ctx, B, X);</div>
<div class="line"><a name="l00130"></a><span class="lineno">  130</span>&#160;  </div>
<div class="line"><a name="l00131"></a><span class="lineno">  131</span>&#160;  <span class="keywordflow">while</span> (la &gt; DTLS_CCM_BLOCKSIZE) {</div>
<div class="line"><a name="l00132"></a><span class="lineno">  132</span>&#160;    <span class="keywordflow">for</span> (i = 0; i &lt; <a class="code" href="ccm_8h.html#a5c46c97c6c3ef5d4e5bd616dbd064859">DTLS_CCM_BLOCKSIZE</a>; ++i)</div>
<div class="line"><a name="l00133"></a><span class="lineno">  133</span>&#160;      B[i] = X[i] ^ *msg++;</div>
<div class="line"><a name="l00134"></a><span class="lineno">  134</span>&#160;    la -= <a class="code" href="ccm_8h.html#a5c46c97c6c3ef5d4e5bd616dbd064859">DTLS_CCM_BLOCKSIZE</a>;</div>
<div class="line"><a name="l00135"></a><span class="lineno">  135</span>&#160;</div>
<div class="line"><a name="l00136"></a><span class="lineno">  136</span>&#160;    rijndael_encrypt(ctx, B, X);</div>
<div class="line"><a name="l00137"></a><span class="lineno">  137</span>&#160;  }</div>
<div class="line"><a name="l00138"></a><span class="lineno">  138</span>&#160;  </div>
<div class="line"><a name="l00139"></a><span class="lineno">  139</span>&#160;  <span class="keywordflow">if</span> (la) {</div>
<div class="line"><a name="l00140"></a><span class="lineno">  140</span>&#160;    memset(B, 0, DTLS_CCM_BLOCKSIZE);</div>
<div class="line"><a name="l00141"></a><span class="lineno">  141</span>&#160;    memcpy(B, msg, la);</div>
<div class="line"><a name="l00142"></a><span class="lineno">  142</span>&#160;    <a class="code" href="global_8h.html#a6c31c5d8a0fe09547a192100d2a00dc5">memxor</a>(B, X, DTLS_CCM_BLOCKSIZE);</div>
<div class="line"><a name="l00143"></a><span class="lineno">  143</span>&#160;</div>
<div class="line"><a name="l00144"></a><span class="lineno">  144</span>&#160;    rijndael_encrypt(ctx, B, X);  </div>
<div class="line"><a name="l00145"></a><span class="lineno">  145</span>&#160;  } </div>
<div class="line"><a name="l00146"></a><span class="lineno">  146</span>&#160;}</div>
<div class="line"><a name="l00147"></a><span class="lineno">  147</span>&#160;</div>
<div class="line"><a name="l00148"></a><span class="lineno">  148</span>&#160;<span class="keyword">static</span> <span class="keyword">inline</span> <span class="keywordtype">void</span></div>
<div class="line"><a name="l00149"></a><span class="lineno"><a class="line" href="ccm_8c.html#a983462ca57ee8fe54249c77281f6559e">  149</a></span>&#160;<a class="code" href="ccm_8c.html#a983462ca57ee8fe54249c77281f6559e">encrypt</a>(rijndael_ctx *ctx, <span class="keywordtype">size_t</span> L, <span class="keywordtype">unsigned</span> <span class="keywordtype">long</span> counter,</div>
<div class="line"><a name="l00150"></a><span class="lineno">  150</span>&#160;    <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *msg, <span class="keywordtype">size_t</span> len,</div>
<div class="line"><a name="l00151"></a><span class="lineno">  151</span>&#160;    <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> A[<a class="code" href="ccm_8h.html#a5c46c97c6c3ef5d4e5bd616dbd064859">DTLS_CCM_BLOCKSIZE</a>],</div>
<div class="line"><a name="l00152"></a><span class="lineno">  152</span>&#160;    <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> S[DTLS_CCM_BLOCKSIZE]) {</div>
<div class="line"><a name="l00153"></a><span class="lineno">  153</span>&#160;</div>
<div class="line"><a name="l00154"></a><span class="lineno">  154</span>&#160;  <span class="keyword">static</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">long</span> counter_tmp;</div>
<div class="line"><a name="l00155"></a><span class="lineno">  155</span>&#160;</div>
<div class="line"><a name="l00156"></a><span class="lineno">  156</span>&#160;  <a class="code" href="ccm_8c.html#a13d9e1fa611f50a7176fd6da7b1b4994">SET_COUNTER</a>(A, L, counter, counter_tmp);    </div>
<div class="line"><a name="l00157"></a><span class="lineno">  157</span>&#160;  rijndael_encrypt(ctx, A, S);</div>
<div class="line"><a name="l00158"></a><span class="lineno">  158</span>&#160;  <a class="code" href="global_8h.html#a6c31c5d8a0fe09547a192100d2a00dc5">memxor</a>(msg, S, len);</div>
<div class="line"><a name="l00159"></a><span class="lineno">  159</span>&#160;}</div>
<div class="line"><a name="l00160"></a><span class="lineno">  160</span>&#160;</div>
<div class="line"><a name="l00161"></a><span class="lineno">  161</span>&#160;<span class="keyword">static</span> <span class="keyword">inline</span> <span class="keywordtype">void</span></div>
<div class="line"><a name="l00162"></a><span class="lineno"><a class="line" href="ccm_8c.html#af90d9a6bdae478b53926bf6f1bd6c9d5">  162</a></span>&#160;<a class="code" href="ccm_8c.html#af90d9a6bdae478b53926bf6f1bd6c9d5">mac</a>(rijndael_ctx *ctx, </div>
<div class="line"><a name="l00163"></a><span class="lineno">  163</span>&#160;    <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *msg, <span class="keywordtype">size_t</span> len,</div>
<div class="line"><a name="l00164"></a><span class="lineno">  164</span>&#160;    <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> B[<a class="code" href="ccm_8h.html#a5c46c97c6c3ef5d4e5bd616dbd064859">DTLS_CCM_BLOCKSIZE</a>],</div>
<div class="line"><a name="l00165"></a><span class="lineno">  165</span>&#160;    <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> X[DTLS_CCM_BLOCKSIZE]) {</div>
<div class="line"><a name="l00166"></a><span class="lineno">  166</span>&#160;  <span class="keywordtype">size_t</span> i;</div>
<div class="line"><a name="l00167"></a><span class="lineno">  167</span>&#160;</div>
<div class="line"><a name="l00168"></a><span class="lineno">  168</span>&#160;  <span class="keywordflow">for</span> (i = 0; i &lt; len; ++i)</div>
<div class="line"><a name="l00169"></a><span class="lineno">  169</span>&#160;    B[i] = X[i] ^ msg[i];</div>
<div class="line"><a name="l00170"></a><span class="lineno">  170</span>&#160;</div>
<div class="line"><a name="l00171"></a><span class="lineno">  171</span>&#160;  rijndael_encrypt(ctx, B, X);</div>
<div class="line"><a name="l00172"></a><span class="lineno">  172</span>&#160;</div>
<div class="line"><a name="l00173"></a><span class="lineno">  173</span>&#160;}</div>
<div class="line"><a name="l00174"></a><span class="lineno">  174</span>&#160;</div>
<div class="line"><a name="l00175"></a><span class="lineno">  175</span>&#160;<span class="keywordtype">long</span> <span class="keywordtype">int</span></div>
<div class="line"><a name="l00176"></a><span class="lineno"><a class="line" href="ccm_8h.html#a40f4f23b5687e18dc1bce1c19101da42">  176</a></span>&#160;<a class="code" href="ccm_8c.html#a40f4f23b5687e18dc1bce1c19101da42">dtls_ccm_encrypt_message</a>(rijndael_ctx *ctx, <span class="keywordtype">size_t</span> M, <span class="keywordtype">size_t</span> L, </div>
<div class="line"><a name="l00177"></a><span class="lineno">  177</span>&#160;             <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> nonce[<a class="code" href="ccm_8h.html#a5c46c97c6c3ef5d4e5bd616dbd064859">DTLS_CCM_BLOCKSIZE</a>], </div>
<div class="line"><a name="l00178"></a><span class="lineno">  178</span>&#160;             <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *msg, <span class="keywordtype">size_t</span> lm, </div>
<div class="line"><a name="l00179"></a><span class="lineno">  179</span>&#160;             <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *aad, <span class="keywordtype">size_t</span> la) {</div>
<div class="line"><a name="l00180"></a><span class="lineno">  180</span>&#160;  <span class="keywordtype">size_t</span> i, len;</div>
<div class="line"><a name="l00181"></a><span class="lineno">  181</span>&#160;  <span class="keywordtype">unsigned</span> <span class="keywordtype">long</span> counter_tmp;</div>
<div class="line"><a name="l00182"></a><span class="lineno">  182</span>&#160;  <span class="keywordtype">unsigned</span> <span class="keywordtype">long</span> counter = 1; <span class="comment">/* \bug does not work correctly on ia32 when</span></div>
<div class="line"><a name="l00183"></a><span class="lineno">  183</span>&#160;<span class="comment">                         lm &gt;= 2^16 */</span></div>
<div class="line"><a name="l00184"></a><span class="lineno">  184</span>&#160;  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> A[<a class="code" href="ccm_8h.html#a5c46c97c6c3ef5d4e5bd616dbd064859">DTLS_CCM_BLOCKSIZE</a>]; <span class="comment">/* A_i blocks for encryption input */</span></div>
<div class="line"><a name="l00185"></a><span class="lineno">  185</span>&#160;  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> B[<a class="code" href="ccm_8h.html#a5c46c97c6c3ef5d4e5bd616dbd064859">DTLS_CCM_BLOCKSIZE</a>]; <span class="comment">/* B_i blocks for CBC-MAC input */</span></div>
<div class="line"><a name="l00186"></a><span class="lineno">  186</span>&#160;  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> S[<a class="code" href="ccm_8h.html#a5c46c97c6c3ef5d4e5bd616dbd064859">DTLS_CCM_BLOCKSIZE</a>]; <span class="comment">/* S_i = encrypted A_i blocks */</span></div>
<div class="line"><a name="l00187"></a><span class="lineno">  187</span>&#160;  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> X[<a class="code" href="ccm_8h.html#a5c46c97c6c3ef5d4e5bd616dbd064859">DTLS_CCM_BLOCKSIZE</a>]; <span class="comment">/* X_i = encrypted B_i blocks */</span></div>
<div class="line"><a name="l00188"></a><span class="lineno">  188</span>&#160;</div>
<div class="line"><a name="l00189"></a><span class="lineno">  189</span>&#160;  len = lm;         <span class="comment">/* save original length */</span></div>
<div class="line"><a name="l00190"></a><span class="lineno">  190</span>&#160;  <span class="comment">/* create the initial authentication block B0 */</span></div>
<div class="line"><a name="l00191"></a><span class="lineno">  191</span>&#160;  <a class="code" href="ccm_8c.html#a1dfe92428f63772e3907a26435e54354">block0</a>(M, L, la, lm, nonce, B);</div>
<div class="line"><a name="l00192"></a><span class="lineno">  192</span>&#160;  <a class="code" href="ccm_8c.html#a59faf5a2a638dc03c01605d4bebe0bcc">add_auth_data</a>(ctx, aad, la, B, X);</div>
<div class="line"><a name="l00193"></a><span class="lineno">  193</span>&#160;</div>
<div class="line"><a name="l00194"></a><span class="lineno">  194</span>&#160;  <span class="comment">/* initialize block template */</span></div>
<div class="line"><a name="l00195"></a><span class="lineno">  195</span>&#160;  A[0] = L-1;</div>
<div class="line"><a name="l00196"></a><span class="lineno">  196</span>&#160;</div>
<div class="line"><a name="l00197"></a><span class="lineno">  197</span>&#160;  <span class="comment">/* copy the nonce */</span></div>
<div class="line"><a name="l00198"></a><span class="lineno">  198</span>&#160;  memcpy(A + 1, nonce, DTLS_CCM_BLOCKSIZE - L);</div>
<div class="line"><a name="l00199"></a><span class="lineno">  199</span>&#160;  </div>
<div class="line"><a name="l00200"></a><span class="lineno">  200</span>&#160;  <span class="keywordflow">while</span> (lm &gt;= DTLS_CCM_BLOCKSIZE) {</div>
<div class="line"><a name="l00201"></a><span class="lineno">  201</span>&#160;    <span class="comment">/* calculate MAC */</span></div>
<div class="line"><a name="l00202"></a><span class="lineno">  202</span>&#160;    <a class="code" href="ccm_8c.html#af90d9a6bdae478b53926bf6f1bd6c9d5">mac</a>(ctx, msg, DTLS_CCM_BLOCKSIZE, B, X);</div>
<div class="line"><a name="l00203"></a><span class="lineno">  203</span>&#160;</div>
<div class="line"><a name="l00204"></a><span class="lineno">  204</span>&#160;    <span class="comment">/* encrypt */</span></div>
<div class="line"><a name="l00205"></a><span class="lineno">  205</span>&#160;    <a class="code" href="ccm_8c.html#a983462ca57ee8fe54249c77281f6559e">encrypt</a>(ctx, L, counter, msg, DTLS_CCM_BLOCKSIZE, A, S);</div>
<div class="line"><a name="l00206"></a><span class="lineno">  206</span>&#160;</div>
<div class="line"><a name="l00207"></a><span class="lineno">  207</span>&#160;    <span class="comment">/* update local pointers */</span></div>
<div class="line"><a name="l00208"></a><span class="lineno">  208</span>&#160;    lm -= <a class="code" href="ccm_8h.html#a5c46c97c6c3ef5d4e5bd616dbd064859">DTLS_CCM_BLOCKSIZE</a>;</div>
<div class="line"><a name="l00209"></a><span class="lineno">  209</span>&#160;    msg += <a class="code" href="ccm_8h.html#a5c46c97c6c3ef5d4e5bd616dbd064859">DTLS_CCM_BLOCKSIZE</a>;</div>
<div class="line"><a name="l00210"></a><span class="lineno">  210</span>&#160;    counter++;</div>
<div class="line"><a name="l00211"></a><span class="lineno">  211</span>&#160;  }</div>
<div class="line"><a name="l00212"></a><span class="lineno">  212</span>&#160;</div>
<div class="line"><a name="l00213"></a><span class="lineno">  213</span>&#160;  <span class="keywordflow">if</span> (lm) {</div>
<div class="line"><a name="l00214"></a><span class="lineno">  214</span>&#160;    <span class="comment">/* Calculate MAC. The remainder of B must be padded with zeroes, so</span></div>
<div class="line"><a name="l00215"></a><span class="lineno">  215</span>&#160;<span class="comment">     * B is constructed to contain X ^ msg for the first lm bytes (done in</span></div>
<div class="line"><a name="l00216"></a><span class="lineno">  216</span>&#160;<span class="comment">     * mac() and X ^ 0 for the remaining DTLS_CCM_BLOCKSIZE - lm bytes</span></div>
<div class="line"><a name="l00217"></a><span class="lineno">  217</span>&#160;<span class="comment">     * (i.e., we can use memcpy() here).</span></div>
<div class="line"><a name="l00218"></a><span class="lineno">  218</span>&#160;<span class="comment">     */</span></div>
<div class="line"><a name="l00219"></a><span class="lineno">  219</span>&#160;    memcpy(B + lm, X + lm, DTLS_CCM_BLOCKSIZE - lm);</div>
<div class="line"><a name="l00220"></a><span class="lineno">  220</span>&#160;    <a class="code" href="ccm_8c.html#af90d9a6bdae478b53926bf6f1bd6c9d5">mac</a>(ctx, msg, lm, B, X);</div>
<div class="line"><a name="l00221"></a><span class="lineno">  221</span>&#160;</div>
<div class="line"><a name="l00222"></a><span class="lineno">  222</span>&#160;    <span class="comment">/* encrypt */</span></div>
<div class="line"><a name="l00223"></a><span class="lineno">  223</span>&#160;    <a class="code" href="ccm_8c.html#a983462ca57ee8fe54249c77281f6559e">encrypt</a>(ctx, L, counter, msg, lm, A, S);</div>
<div class="line"><a name="l00224"></a><span class="lineno">  224</span>&#160;</div>
<div class="line"><a name="l00225"></a><span class="lineno">  225</span>&#160;    <span class="comment">/* update local pointers */</span></div>
<div class="line"><a name="l00226"></a><span class="lineno">  226</span>&#160;    msg += lm;</div>
<div class="line"><a name="l00227"></a><span class="lineno">  227</span>&#160;  }</div>
<div class="line"><a name="l00228"></a><span class="lineno">  228</span>&#160;  </div>
<div class="line"><a name="l00229"></a><span class="lineno">  229</span>&#160;  <span class="comment">/* calculate S_0 */</span>  </div>
<div class="line"><a name="l00230"></a><span class="lineno">  230</span>&#160;  <a class="code" href="ccm_8c.html#a13d9e1fa611f50a7176fd6da7b1b4994">SET_COUNTER</a>(A, L, 0, counter_tmp);</div>
<div class="line"><a name="l00231"></a><span class="lineno">  231</span>&#160;  rijndael_encrypt(ctx, A, S);</div>
<div class="line"><a name="l00232"></a><span class="lineno">  232</span>&#160;</div>
<div class="line"><a name="l00233"></a><span class="lineno">  233</span>&#160;  <span class="keywordflow">for</span> (i = 0; i &lt; M; ++i)</div>
<div class="line"><a name="l00234"></a><span class="lineno">  234</span>&#160;    *msg++ = X[i] ^ S[i];</div>
<div class="line"><a name="l00235"></a><span class="lineno">  235</span>&#160;</div>
<div class="line"><a name="l00236"></a><span class="lineno">  236</span>&#160;  <span class="keywordflow">return</span> len + M;</div>
<div class="line"><a name="l00237"></a><span class="lineno">  237</span>&#160;}</div>
<div class="line"><a name="l00238"></a><span class="lineno">  238</span>&#160;</div>
<div class="line"><a name="l00239"></a><span class="lineno">  239</span>&#160;<span class="keywordtype">long</span> <span class="keywordtype">int</span></div>
<div class="line"><a name="l00240"></a><span class="lineno"><a class="line" href="ccm_8h.html#aa3e92bdeca1d0730d48b8a85181d5b6d">  240</a></span>&#160;<a class="code" href="ccm_8c.html#aa3e92bdeca1d0730d48b8a85181d5b6d">dtls_ccm_decrypt_message</a>(rijndael_ctx *ctx, <span class="keywordtype">size_t</span> M, <span class="keywordtype">size_t</span> L,</div>
<div class="line"><a name="l00241"></a><span class="lineno">  241</span>&#160;             <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> nonce[<a class="code" href="ccm_8h.html#a5c46c97c6c3ef5d4e5bd616dbd064859">DTLS_CCM_BLOCKSIZE</a>], </div>
<div class="line"><a name="l00242"></a><span class="lineno">  242</span>&#160;             <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *msg, <span class="keywordtype">size_t</span> lm, </div>
<div class="line"><a name="l00243"></a><span class="lineno">  243</span>&#160;             <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *aad, <span class="keywordtype">size_t</span> la) {</div>
<div class="line"><a name="l00244"></a><span class="lineno">  244</span>&#160;  </div>
<div class="line"><a name="l00245"></a><span class="lineno">  245</span>&#160;  <span class="keywordtype">size_t</span> len;</div>
<div class="line"><a name="l00246"></a><span class="lineno">  246</span>&#160;  <span class="keywordtype">unsigned</span> <span class="keywordtype">long</span> counter_tmp;</div>
<div class="line"><a name="l00247"></a><span class="lineno">  247</span>&#160;  <span class="keywordtype">unsigned</span> <span class="keywordtype">long</span> counter = 1; <span class="comment">/* \bug does not work correctly on ia32 when</span></div>
<div class="line"><a name="l00248"></a><span class="lineno">  248</span>&#160;<span class="comment">                         lm &gt;= 2^16 */</span></div>
<div class="line"><a name="l00249"></a><span class="lineno">  249</span>&#160;  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> A[<a class="code" href="ccm_8h.html#a5c46c97c6c3ef5d4e5bd616dbd064859">DTLS_CCM_BLOCKSIZE</a>]; <span class="comment">/* A_i blocks for encryption input */</span></div>
<div class="line"><a name="l00250"></a><span class="lineno">  250</span>&#160;  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> B[<a class="code" href="ccm_8h.html#a5c46c97c6c3ef5d4e5bd616dbd064859">DTLS_CCM_BLOCKSIZE</a>]; <span class="comment">/* B_i blocks for CBC-MAC input */</span></div>
<div class="line"><a name="l00251"></a><span class="lineno">  251</span>&#160;  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> S[<a class="code" href="ccm_8h.html#a5c46c97c6c3ef5d4e5bd616dbd064859">DTLS_CCM_BLOCKSIZE</a>]; <span class="comment">/* S_i = encrypted A_i blocks */</span></div>
<div class="line"><a name="l00252"></a><span class="lineno">  252</span>&#160;  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> X[<a class="code" href="ccm_8h.html#a5c46c97c6c3ef5d4e5bd616dbd064859">DTLS_CCM_BLOCKSIZE</a>]; <span class="comment">/* X_i = encrypted B_i blocks */</span></div>
<div class="line"><a name="l00253"></a><span class="lineno">  253</span>&#160;</div>
<div class="line"><a name="l00254"></a><span class="lineno">  254</span>&#160;  <span class="keywordflow">if</span> (lm &lt; M)</div>
<div class="line"><a name="l00255"></a><span class="lineno">  255</span>&#160;    <span class="keywordflow">goto</span> error;</div>
<div class="line"><a name="l00256"></a><span class="lineno">  256</span>&#160;</div>
<div class="line"><a name="l00257"></a><span class="lineno">  257</span>&#160;  len = lm;       <span class="comment">/* save original length */</span></div>
<div class="line"><a name="l00258"></a><span class="lineno">  258</span>&#160;  lm -= M;        <span class="comment">/* detract MAC size*/</span></div>
<div class="line"><a name="l00259"></a><span class="lineno">  259</span>&#160;</div>
<div class="line"><a name="l00260"></a><span class="lineno">  260</span>&#160;  <span class="comment">/* create the initial authentication block B0 */</span></div>
<div class="line"><a name="l00261"></a><span class="lineno">  261</span>&#160;  <a class="code" href="ccm_8c.html#a1dfe92428f63772e3907a26435e54354">block0</a>(M, L, la, lm, nonce, B);</div>
<div class="line"><a name="l00262"></a><span class="lineno">  262</span>&#160;  <a class="code" href="ccm_8c.html#a59faf5a2a638dc03c01605d4bebe0bcc">add_auth_data</a>(ctx, aad, la, B, X);</div>
<div class="line"><a name="l00263"></a><span class="lineno">  263</span>&#160;</div>
<div class="line"><a name="l00264"></a><span class="lineno">  264</span>&#160;  <span class="comment">/* initialize block template */</span></div>
<div class="line"><a name="l00265"></a><span class="lineno">  265</span>&#160;  A[0] = L-1;</div>
<div class="line"><a name="l00266"></a><span class="lineno">  266</span>&#160;</div>
<div class="line"><a name="l00267"></a><span class="lineno">  267</span>&#160;  <span class="comment">/* copy the nonce */</span></div>
<div class="line"><a name="l00268"></a><span class="lineno">  268</span>&#160;  memcpy(A + 1, nonce, DTLS_CCM_BLOCKSIZE - L);</div>
<div class="line"><a name="l00269"></a><span class="lineno">  269</span>&#160;  </div>
<div class="line"><a name="l00270"></a><span class="lineno">  270</span>&#160;  <span class="keywordflow">while</span> (lm &gt;= DTLS_CCM_BLOCKSIZE) {</div>
<div class="line"><a name="l00271"></a><span class="lineno">  271</span>&#160;    <span class="comment">/* decrypt */</span></div>
<div class="line"><a name="l00272"></a><span class="lineno">  272</span>&#160;    <a class="code" href="ccm_8c.html#a983462ca57ee8fe54249c77281f6559e">encrypt</a>(ctx, L, counter, msg, DTLS_CCM_BLOCKSIZE, A, S);</div>
<div class="line"><a name="l00273"></a><span class="lineno">  273</span>&#160;    </div>
<div class="line"><a name="l00274"></a><span class="lineno">  274</span>&#160;    <span class="comment">/* calculate MAC */</span></div>
<div class="line"><a name="l00275"></a><span class="lineno">  275</span>&#160;    <a class="code" href="ccm_8c.html#af90d9a6bdae478b53926bf6f1bd6c9d5">mac</a>(ctx, msg, DTLS_CCM_BLOCKSIZE, B, X);</div>
<div class="line"><a name="l00276"></a><span class="lineno">  276</span>&#160;</div>
<div class="line"><a name="l00277"></a><span class="lineno">  277</span>&#160;    <span class="comment">/* update local pointers */</span></div>
<div class="line"><a name="l00278"></a><span class="lineno">  278</span>&#160;    lm -= <a class="code" href="ccm_8h.html#a5c46c97c6c3ef5d4e5bd616dbd064859">DTLS_CCM_BLOCKSIZE</a>;</div>
<div class="line"><a name="l00279"></a><span class="lineno">  279</span>&#160;    msg += <a class="code" href="ccm_8h.html#a5c46c97c6c3ef5d4e5bd616dbd064859">DTLS_CCM_BLOCKSIZE</a>;</div>
<div class="line"><a name="l00280"></a><span class="lineno">  280</span>&#160;    counter++;</div>
<div class="line"><a name="l00281"></a><span class="lineno">  281</span>&#160;  }</div>
<div class="line"><a name="l00282"></a><span class="lineno">  282</span>&#160;</div>
<div class="line"><a name="l00283"></a><span class="lineno">  283</span>&#160;  <span class="keywordflow">if</span> (lm) {</div>
<div class="line"><a name="l00284"></a><span class="lineno">  284</span>&#160;    <span class="comment">/* decrypt */</span></div>
<div class="line"><a name="l00285"></a><span class="lineno">  285</span>&#160;    <a class="code" href="ccm_8c.html#a983462ca57ee8fe54249c77281f6559e">encrypt</a>(ctx, L, counter, msg, lm, A, S);</div>
<div class="line"><a name="l00286"></a><span class="lineno">  286</span>&#160;</div>
<div class="line"><a name="l00287"></a><span class="lineno">  287</span>&#160;    <span class="comment">/* Calculate MAC. Note that msg ends in the MAC so we must</span></div>
<div class="line"><a name="l00288"></a><span class="lineno">  288</span>&#160;<span class="comment">     * construct B to contain X ^ msg for the first lm bytes (done in</span></div>
<div class="line"><a name="l00289"></a><span class="lineno">  289</span>&#160;<span class="comment">     * mac() and X ^ 0 for the remaining DTLS_CCM_BLOCKSIZE - lm bytes</span></div>
<div class="line"><a name="l00290"></a><span class="lineno">  290</span>&#160;<span class="comment">     * (i.e., we can use memcpy() here).</span></div>
<div class="line"><a name="l00291"></a><span class="lineno">  291</span>&#160;<span class="comment">     */</span></div>
<div class="line"><a name="l00292"></a><span class="lineno">  292</span>&#160;    memcpy(B + lm, X + lm, DTLS_CCM_BLOCKSIZE - lm);</div>
<div class="line"><a name="l00293"></a><span class="lineno">  293</span>&#160;    <a class="code" href="ccm_8c.html#af90d9a6bdae478b53926bf6f1bd6c9d5">mac</a>(ctx, msg, lm, B, X); </div>
<div class="line"><a name="l00294"></a><span class="lineno">  294</span>&#160;</div>
<div class="line"><a name="l00295"></a><span class="lineno">  295</span>&#160;    <span class="comment">/* update local pointers */</span></div>
<div class="line"><a name="l00296"></a><span class="lineno">  296</span>&#160;    msg += lm;</div>
<div class="line"><a name="l00297"></a><span class="lineno">  297</span>&#160;  }</div>
<div class="line"><a name="l00298"></a><span class="lineno">  298</span>&#160;  </div>
<div class="line"><a name="l00299"></a><span class="lineno">  299</span>&#160;  <span class="comment">/* calculate S_0 */</span>  </div>
<div class="line"><a name="l00300"></a><span class="lineno">  300</span>&#160;  <a class="code" href="ccm_8c.html#a13d9e1fa611f50a7176fd6da7b1b4994">SET_COUNTER</a>(A, L, 0, counter_tmp);</div>
<div class="line"><a name="l00301"></a><span class="lineno">  301</span>&#160;  rijndael_encrypt(ctx, A, S);</div>
<div class="line"><a name="l00302"></a><span class="lineno">  302</span>&#160;</div>
<div class="line"><a name="l00303"></a><span class="lineno">  303</span>&#160;  <a class="code" href="global_8h.html#a6c31c5d8a0fe09547a192100d2a00dc5">memxor</a>(msg, S, M);</div>
<div class="line"><a name="l00304"></a><span class="lineno">  304</span>&#160;</div>
<div class="line"><a name="l00305"></a><span class="lineno">  305</span>&#160;  <span class="comment">/* return length if MAC is valid, otherwise continue with error handling */</span></div>
<div class="line"><a name="l00306"></a><span class="lineno">  306</span>&#160;  <span class="keywordflow">if</span> (<a class="code" href="global_8h.html#a8277c276ecd5cd2f998f08fd344d90ef">equals</a>(X, msg, M))</div>
<div class="line"><a name="l00307"></a><span class="lineno">  307</span>&#160;    <span class="keywordflow">return</span> len - M;</div>
<div class="line"><a name="l00308"></a><span class="lineno">  308</span>&#160;  </div>
<div class="line"><a name="l00309"></a><span class="lineno">  309</span>&#160; error:</div>
<div class="line"><a name="l00310"></a><span class="lineno">  310</span>&#160;  <span class="keywordflow">return</span> -1;</div>
<div class="line"><a name="l00311"></a><span class="lineno">  311</span>&#160;}</div>
<div class="ttc" id="ccm_8c_html_a1dfe92428f63772e3907a26435e54354"><div class="ttname"><a href="ccm_8c.html#a1dfe92428f63772e3907a26435e54354">block0</a></div><div class="ttdeci">static void block0(size_t M, size_t L, size_t la, size_t lm, unsigned char nonce[DTLS_CCM_BLOCKSIZE], unsigned char *result)</div><div class="ttdef"><b>Definition:</b> <a href="ccm_8c_source.html#l00050">ccm.c:50</a></div></div>
<div class="ttc" id="dtls__config_8h_html"><div class="ttname"><a href="dtls__config_8h.html">dtls_config.h</a></div></div>
<div class="ttc" id="ccm_8c_html_aa3e92bdeca1d0730d48b8a85181d5b6d"><div class="ttname"><a href="ccm_8c.html#aa3e92bdeca1d0730d48b8a85181d5b6d">dtls_ccm_decrypt_message</a></div><div class="ttdeci">long int dtls_ccm_decrypt_message(rijndael_ctx *ctx, size_t M, size_t L, unsigned char nonce[DTLS_CCM_BLOCKSIZE], unsigned char *msg, size_t lm, const unsigned char *aad, size_t la)</div><div class="ttdef"><b>Definition:</b> <a href="ccm_8c_source.html#l00240">ccm.c:240</a></div></div>
<div class="ttc" id="debug_8c_html_ac6afabdc09a49a433ee19d8a9486056d"><div class="ttname"><a href="debug_8c.html#ac6afabdc09a49a433ee19d8a9486056d">min</a></div><div class="ttdeci">#define min(a, b)</div><div class="ttdef"><b>Definition:</b> <a href="debug_8c_source.html#l00114">debug.c:114</a></div></div>
<div class="ttc" id="global_8h_html_a6c31c5d8a0fe09547a192100d2a00dc5"><div class="ttname"><a href="global_8h.html#a6c31c5d8a0fe09547a192100d2a00dc5">memxor</a></div><div class="ttdeci">static void memxor(unsigned char *x, const unsigned char *y, size_t n)</div><div class="ttdef"><b>Definition:</b> <a href="global_8h_source.html#l00109">global.h:109</a></div></div>
<div class="ttc" id="ccm_8c_html_a983462ca57ee8fe54249c77281f6559e"><div class="ttname"><a href="ccm_8c.html#a983462ca57ee8fe54249c77281f6559e">encrypt</a></div><div class="ttdeci">static void encrypt(rijndael_ctx *ctx, size_t L, unsigned long counter, unsigned char *msg, size_t len, unsigned char A[DTLS_CCM_BLOCKSIZE], unsigned char S[DTLS_CCM_BLOCKSIZE])</div><div class="ttdef"><b>Definition:</b> <a href="ccm_8c_source.html#l00149">ccm.c:149</a></div></div>
<div class="ttc" id="global_8h_html"><div class="ttname"><a href="global_8h.html">global.h</a></div></div>
<div class="ttc" id="ccm_8c_html_a18f6fffa08314e79c95e2de10e7409cb"><div class="ttname"><a href="ccm_8c.html#a18f6fffa08314e79c95e2de10e7409cb">CCM_FLAGS</a></div><div class="ttdeci">#define CCM_FLAGS(A, M, L)</div><div class="ttdef"><b>Definition:</b> <a href="ccm_8c_source.html#l00037">ccm.c:37</a></div></div>
<div class="ttc" id="ccm_8c_html_a40f4f23b5687e18dc1bce1c19101da42"><div class="ttname"><a href="ccm_8c.html#a40f4f23b5687e18dc1bce1c19101da42">dtls_ccm_encrypt_message</a></div><div class="ttdeci">long int dtls_ccm_encrypt_message(rijndael_ctx *ctx, size_t M, size_t L, unsigned char nonce[DTLS_CCM_BLOCKSIZE], unsigned char *msg, size_t lm, const unsigned char *aad, size_t la)</div><div class="ttdef"><b>Definition:</b> <a href="ccm_8c_source.html#l00176">ccm.c:176</a></div></div>
<div class="ttc" id="numeric_8h_html_ab4d80395fb7f4118dfcb101ae94a5e93"><div class="ttname"><a href="numeric_8h.html#ab4d80395fb7f4118dfcb101ae94a5e93">dtls_int_to_uint64</a></div><div class="ttdeci">static int dtls_int_to_uint64(unsigned char *field, uint64_t value)</div><div class="ttdef"><b>Definition:</b> <a href="numeric_8h_source.html#l00081">numeric.h:81</a></div></div>
<div class="ttc" id="numeric_8h_html_a074d352855e1ffde4c2ddb6a6fea01b9"><div class="ttname"><a href="numeric_8h.html#a074d352855e1ffde4c2ddb6a6fea01b9">dtls_int_to_uint16</a></div><div class="ttdeci">static int dtls_int_to_uint16(unsigned char *field, uint16_t value)</div><div class="ttdef"><b>Definition:</b> <a href="numeric_8h_source.html#l00046">numeric.h:46</a></div></div>
<div class="ttc" id="ccm_8c_html_a59faf5a2a638dc03c01605d4bebe0bcc"><div class="ttname"><a href="ccm_8c.html#a59faf5a2a638dc03c01605d4bebe0bcc">add_auth_data</a></div><div class="ttdeci">static void add_auth_data(rijndael_ctx *ctx, const unsigned char *msg, size_t la, unsigned char B[DTLS_CCM_BLOCKSIZE], unsigned char X[DTLS_CCM_BLOCKSIZE])</div><div class="ttdef"><b>Definition:</b> <a href="ccm_8c_source.html#l00084">ccm.c:84</a></div></div>
<div class="ttc" id="numeric_8h_html_a6914ee523b27539f4e441bede8c072b4"><div class="ttname"><a href="numeric_8h.html#a6914ee523b27539f4e441bede8c072b4">dtls_int_to_uint32</a></div><div class="ttdeci">static int dtls_int_to_uint32(unsigned char *field, uint32_t value)</div><div class="ttdef"><b>Definition:</b> <a href="numeric_8h_source.html#l00061">numeric.h:61</a></div></div>
<div class="ttc" id="ccm_8c_html_af90d9a6bdae478b53926bf6f1bd6c9d5"><div class="ttname"><a href="ccm_8c.html#af90d9a6bdae478b53926bf6f1bd6c9d5">mac</a></div><div class="ttdeci">static void mac(rijndael_ctx *ctx, unsigned char *msg, size_t len, unsigned char B[DTLS_CCM_BLOCKSIZE], unsigned char X[DTLS_CCM_BLOCKSIZE])</div><div class="ttdef"><b>Definition:</b> <a href="ccm_8c_source.html#l00162">ccm.c:162</a></div></div>
<div class="ttc" id="ccm_8h_html_a5c46c97c6c3ef5d4e5bd616dbd064859"><div class="ttname"><a href="ccm_8h.html#a5c46c97c6c3ef5d4e5bd616dbd064859">DTLS_CCM_BLOCKSIZE</a></div><div class="ttdeci">#define DTLS_CCM_BLOCKSIZE</div><div class="ttdef"><b>Definition:</b> <a href="ccm_8h_source.html#l00033">ccm.h:33</a></div></div>
<div class="ttc" id="global_8h_html_a8277c276ecd5cd2f998f08fd344d90ef"><div class="ttname"><a href="global_8h.html#a8277c276ecd5cd2f998f08fd344d90ef">equals</a></div><div class="ttdeci">static int equals(unsigned char *a, unsigned char *b, size_t len)</div><div class="ttdef"><b>Definition:</b> <a href="global_8h_source.html#l00127">global.h:127</a></div></div>
<div class="ttc" id="numeric_8h_html"><div class="ttname"><a href="numeric_8h.html">numeric.h</a></div></div>
<div class="ttc" id="ccm_8c_html_a13d9e1fa611f50a7176fd6da7b1b4994"><div class="ttname"><a href="ccm_8c.html#a13d9e1fa611f50a7176fd6da7b1b4994">SET_COUNTER</a></div><div class="ttdeci">#define SET_COUNTER(A, L, cnt, C)</div><div class="ttdef"><b>Definition:</b> <a href="ccm_8c_source.html#l00041">ccm.c:41</a></div></div>
<div class="ttc" id="ccm_8h_html"><div class="ttname"><a href="ccm_8h.html">ccm.h</a></div></div>
</div><!-- fragment --></div><!-- contents -->
<!-- start footer part -->
<hr class="footer"/><address class="footer"><small>
Generated on Fri Feb 27 2015 15:15:33 for tinydtls by &#160;<a href="http://www.doxygen.org/index.html">
<img class="footer" src="doxygen.png" alt="doxygen"/>
</a> 1.8.6
</small></address>
</body>
</html>
